# Phishing sites impersonating Zelle PhishDestroy has recorded 42 phishing domains impersonating Zelle since 2025-08-08, 31 of them in the last 30 days. The most used registrars are Dynadot and Dynadot; the most common TLDs are .de and .com. Open Zelle only from its official app or a saved bookmark. 42Domains, all time 31Last 30 days 37Online at last check 1Confirmed takedowns ## New domains in the last 90 days Zelle phishing domains detected per day: 34 from 2026-07-25 to 2026-10-22; peak 11. ## How to tell a fake Zelle site Words most often added to the brand in reported domains: exemplumlimited, stellarcapitalventure, nirvanagun, orbit, staticrun, anvil, yupooz, zerwards, startedzelleio, rainbet. - Type the address yourself or use a bookmark; phishing links for Zelle arrive through ads, search results, direct messages and fake support accounts. - Check the full domain before you sign in: look for extra words, hyphens, a different TLD or look-alike letters. - Zelle will never ask for your seed phrase. Read every wallet signature: approvals, Permit and setApprovalForAll requests can hand over your assets. Paste a suspicious address into the [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) or check it against the [DestroyList](https://phishdestroy.io/developer-tools/destroylist-check). ## Latest Zelle phishing domains The 42 most recently detected domains impersonating Zelle Domain | First detected | Status at last check | Registrar | [axionfin.de](https://phishdestroy.io/domain/axionfin.de/) | 2026-10-22 | Online | — | [axiskern.net](https://phishdestroy.io/domain/axiskern.net/) | 2026-10-22 | Online | Dynadot | [avexpro60.de](https://phishdestroy.io/domain/avexpro60.de/) | 2026-10-22 | Online | — | [autoexportfreiburg.com](https://phishdestroy.io/domain/autoexportfreiburg.com/) | 2026-10-22 | Online | Dynadot | [apexweeas.de](https://phishdestroy.io/domain/apexweeas.de/) | 2026-10-21 | Online | — | [alpition.de](https://phishdestroy.io/domain/alpition.de/) | 2026-10-20 | Online | — | [algorithmischeplattform.de](https://phishdestroy.io/domain/algorithmischeplattform.de/) | 2026-10-20 | Online | — | [alpitioncapital.de](https://phishdestroy.io/domain/alpitioncapital.de/) | 2026-10-20 | Online | — | [bohrerhandelshop.shop](https://phishdestroy.io/domain/bohrerhandelshop.shop/) | 2026-10-20 | Offline | Dynadot | [bodylabshop.shop](https://phishdestroy.io/domain/bodylabshop.shop/) | 2026-10-20 | Offline | Dynadot | [agrontorikal.com](https://phishdestroy.io/domain/agrontorikal.com/) | 2026-10-20 | Online | Dynadot | [aiswisswerk.de](https://phishdestroy.io/domain/aiswisswerk.de/) | 2026-10-20 | Online | — | [bigmaxgolfpro.shop](https://phishdestroy.io/domain/bigmaxgolfpro.shop/) | 2026-10-16 | Online | Dynadot | [mrking10057.cam](https://phishdestroy.io/domain/mrking10057.cam/) | 2026-10-13 | Offline | DYNADOT | [rusticflora.net](https://phishdestroy.io/domain/rusticflora.net/) | 2026-10-09 | Online | Dynadot | [tivorfin.de](https://phishdestroy.io/domain/tivorfin.de/) | 2026-10-09 | Online | — | [treuwertheid.de](https://phishdestroy.io/domain/treuwertheid.de/) | 2026-10-09 | Online | — | [tylvionmorqex.com](https://phishdestroy.io/domain/tylvionmorqex.com/) | 2026-10-09 | Online | Dynadot | [zentroforge.net](https://phishdestroy.io/domain/zentroforge.net/) | 2026-10-09 | Online | Dynadot | [wortexlogik.de](https://phishdestroy.io/domain/wortexlogik.de/) | 2026-10-09 | Online | — | [vexalorefloxintrade.de](https://phishdestroy.io/domain/vexalorefloxintrade.de/) | 2026-10-09 | Online | — | [kimatrixplatform.net](https://phishdestroy.io/domain/kimatrixplatform.net/) | 2026-10-09 | Online | Dynadot | [zyncrogeldtradetrade.de](https://phishdestroy.io/domain/zyncrogeldtradetrade.de/) | 2026-10-09 | Online | — | [zukunfttreuhand.de](https://phishdestroy.io/domain/zukunfttreuhand.de/) | 2026-10-09 | Online | — | [zyncrogeldplatform.de](https://phishdestroy.io/domain/zyncrogeldplatform.de/) | 2026-10-09 | Online | — | [ordexiacharts.de](https://phishdestroy.io/domain/ordexiacharts.de/) | 2026-10-08 | Online | — | [kapterzoratrade.de](https://phishdestroy.io/domain/kapterzoratrade.de/) | 2026-10-08 | Online | — | [laserki1000.com](https://phishdestroy.io/domain/laserki1000.com/) | 2026-10-08 | Online | Dynadot | [apeksgear.shop](https://phishdestroy.io/domain/apeksgear.shop/) | 2026-10-07 | Online | Dynadot | [altoshelf.shop](https://phishdestroy.io/domain/altoshelf.shop/) | 2026-10-06 | Offline | Dynadot | [apeksportsco.shop](https://phishdestroy.io/domain/apeksportsco.shop/) | 2026-10-02 | Online | Dynadot | [aeydestudio.shop](https://phishdestroy.io/domain/aeydestudio.shop/) | 2026-09-22 | Online | Dynadot | [ucretsizuc.com](https://phishdestroy.io/domain/ucretsizuc.com/) | 2026-08-18 | Offline | Spaceship | [rainbet.or.at](https://phishdestroy.io/domain/rainbet.or.at/) | 2026-08-12 | Online | Dynadot ( https://nic.at/registrar/650 ) | [startedzelleio.wixstudio.com](https://phishdestroy.io/domain/startedzelleio.wixstudio.com/) | 2026-04-07 | Online | Wix Studio | [zerwards.com](https://phishdestroy.io/domain/zerwards.com/) | 2026-02-13 | Online | NiceNIC | [yupooz.com](https://phishdestroy.io/domain/yupooz.com/) | 2025-12-10 | Online | DNSPod | [anvil.org.ph](https://phishdestroy.io/domain/anvil.org.ph/) | 2025-10-23 | Taken down | Cloudflare | [orbit-1760176834817.staticrun.app](https://phishdestroy.io/domain/orbit-1760176834817.staticrun.app/) | 2025-10-15 | Online | Cloudflare | [nirvanagun.netlify.app](https://phishdestroy.io/domain/nirvanagun.netlify.app/) | 2025-09-03 | Online | Netlify | [stellarcapitalventure.com](https://phishdestroy.io/domain/stellarcapitalventure.com/) | 2025-08-08 | Online | Atak Domain | [exemplumlimited.com](https://phishdestroy.io/domain/exemplumlimited.com/) | 2025-08-08 | Online | Internet Domain Service BS | [All 42 Zelle reports](https://phishdestroy.io/domain/?brand=Zelle) ## Where they are registered and hosted ### Registrars - [Dynadot](https://phishdestroy.io/registrar/dynadot/)8 - [Dynadot](https://phishdestroy.io/registrar/dynadot/)7 - Cloudflare2 - [Internet Domain Service BS](https://phishdestroy.io/registrar/internet-domain-service-bs-corp/)1 - [Atak Domain](https://phishdestroy.io/registrar/atak-domain/)1 - Netlify1 - DNSPod1 - [NiceNIC](https://phishdestroy.io/registrar/nicenic/)1 ### Top-level domains - [.de](https://phishdestroy.io/tld/de/)16 - [.com](https://phishdestroy.io/tld/com/)10 - [.shop](https://phishdestroy.io/tld/shop/)7 - [.net](https://phishdestroy.io/tld/net/)4 - [.app](https://phishdestroy.io/tld/app/)2 - [.ph](https://phishdestroy.io/tld/ph/)1 - [.at](https://phishdestroy.io/tld/at/)1 - [.cam](https://phishdestroy.io/tld/cam/)1 ### Hosting networks - Omegatech LTD10 - AS202412 Omegatech LTD7 - OMEGATECH-AS Omegatech LTD, SC7 - malakmadze Malakmadze Web LLC, GE4 - Malakmadze Web LLC3 - hostbet HostBet Cloud Technologies Private Limit2 - CLOUDFLARENET, US2 - AMAZON-02, US1 ## Related - [Typosquatting](https://phishdestroy.io/glossary/typosquatting/) - [Homoglyph](https://phishdestroy.io/glossary/homoglyph/) - [Phishing kit](https://phishdestroy.io/glossary/phishing-kit/) - [Wallet drainer](https://phishdestroy.io/glossary/wallet-drainer/) - [Seed phrase phishing](https://phishdestroy.io/glossary/seed-phrase-phishing/) - [Homoglyph Checker](https://phishdestroy.io/developer-tools/homoglyph-checker) - [Abuse Report Generator](https://phishdestroy.io/developer-tools/abuse-report-generator) - [If you already used a fake site: emergency guide](https://phishdestroy.io/critical-action) - [All impersonated brands](https://phishdestroy.io/brand/) Data: PhishDestroy domain-report database, built 2026-10-22. Counts cover every reported domain whose stored target brand is Zelle; share of all PhishDestroy reports: 0.02%. Canonical: https://phishdestroy.io/brand/zelle/